Data Protection
Protecting personal data is an essential element of our business operations and corporate responsibility.
At UNIQA, protecting personal data and respecting privacy are fundamental principles embedded in our business operations. We are committed to ensuring that personal data is processed lawfully, fairly and transparently, while maintaining appropriate standards of security and confidentiality.
This section provides general information about our approach to data protection, the processing of personal data and the rights available to individuals. More detailed information about specific processing activities is provided in the relevant privacy notices.
Controller
The protection of personal data is an important part of how we conduct our business.
Personal data is processed by UNIQA Insurance Group AG acting through its relevant branch, depending on the country and the nature of the processing activity.
The relevant branch acting on behalf of UNIQA Insurance Group AG in relation to a particular processing activity may be:
- UNIQA Insurance Group AG, organizačná zložka, Slovak Republic ("UIG SK");
- UNIQA Insurance Group AG Magyarországi Fióktelepe, Hungary ("UIG HU");
- UNIQA Insurance Group AG Vienna – Cluj-Napoca Branch, Romania ("UIG RO");
- UNIQA Group Bulgaria branch, Bulgaria ("UIG BG").
If you have any questions regarding the processing of personal data or wish to exercise your data protection rights, please contact us at GDPR-GSC@uniqa.at.
Our Approach to Data Protection
We recognize the importance of protecting personal data and respecting the privacy of individuals whose data we process. Personal data is processed only for specified and legitimate purposes, on an appropriate legal basis and only to the extent necessary for the relevant purpose.
We apply appropriate safeguards designed to protect personal data throughout its lifecycle and continuously review our practices, processes and controls to support compliance with applicable data protection requirements.
Data Protection Principles
Our approach is guided by the fundamental data protection principles set out in applicable legislation:
Lawfulness, fairness and transparency
We process personal data only where there is an appropriate legal basis and strive to provide clear and accessible information about how personal data is used.
Purpose limitation
We collect personal data only for specified, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes.
Data minimization
We seek to process only personal data that is adequate, relevant and necessary for the intended purpose.
Accuracy
We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date.
Storage limitation
We retain personal data only for as long as necessary for the relevant purpose or to comply with applicable legal, regulatory or contractual requirements.
Integrity and confidentiality
We use appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.
Accountability
We are responsible for demonstrating compliance with applicable data protection requirements and for integrating data protection considerations into relevant processes and decision-making.
Processing of Personal Data
As part of our business activities, we may process personal data relating to individuals with whom we interact, including employees, job applicants, suppliers, business partners, website visitors and other individuals.
Personal data may be obtained directly from individuals, through business interactions and communication channels, in connection with the provision of services, through websites and digital systems, or from other legitimate sources where permitted by applicable law.
Categories of Personal Data
Depending on the nature of the interaction and the relevant purpose, the categories of personal data processed may include:
- identification data;
- contact details;
- employment-related information;
- professional and business contact information.
The specific categories of personal data processed depend on the relevant processing activity, its purpose and legal basis.
Purposes and Legal Bases for Processing
We process personal data only for specified, explicit and legitimate purposes and where there is a valid legal basis. Depending on the circumstances, processing may be necessary:
- to comply with legal or regulatory obligations;
- for the performance of a contract or to take steps at the request of an individual before entering into a contract;
- for the purposes of legitimate interests pursued by us or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the individual;
- on the basis of consent, where consent is required or obtained.
Further information about the purposes and legal bases applicable to a specific processing activity is provided in the relevant privacy notice.
Data Sharing and International Transfers
Where necessary and permitted by law, personal data may be shared with service providers, professional advisers, companies within the UNIQA Group, public authorities or other recipients involved in the relevant processing activity.
Where personal data is transferred outside the European Economic Area, appropriate safeguards are implemented in accordance with applicable data protection requirements.
Data Security
We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss or alteration and against unauthorised disclosure or access. Security measures are reviewed and maintained with regard to the nature of the processing and the associated risks.
Personsauthorised to process personal data are subject to applicable confidentiality obligations.
Governance and Accountability
Data protection forms an integral part of our governance framework. We review relevant policies, procedures and controls to support compliance with legal and regulatory requirements and to promote responsible handling of personal data throughout the organisation.
We support a culture of privacy awareness and accountability and seek to incorporate data protection considerations into relevant business processes and decision-making activities, including through the principles of data protection by design and by default.
Data Retention
Personal data is retained only for as long as necessary to fulfil the relevant processing purpose or to comply with applicable legal, regulatory or contractual requirements. Retention periods are determined with regard to the nature of the data, the purpose of processing and applicable obligations.
Your Data Protection Rights
Subject to the conditions and limitations set out in applicable data protection law, individuals may have the following rights in relation to their personal data:
Right of access
You may request confirmation as to whether we process your personal data and obtain information about the processing, including access to the personal data concerned.
Right to rectification
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure
In certain circumstances, you may request the deletion of your personal data, for example where it is no longer necessary for the purpose for which it was collected.
Right to restriction of processing
In specific situations, you may request that the processing of your personal data be restricted.
Right to data portability
Where the applicable legal conditions are met, you may request to receive personal data that you provided to us in a structured, commonly used and machine-readable format or request its transmission to another controller.
Right to object
You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object at any time to processing for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
Right to lodge a complaint
You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
Exercising Your Rights
If you wish to exercise any of your data protection rights or have questions regarding the processing of your personal data, please contact us using the details below. We may request additional information where necessary to verify your identity and protect personal data against unauthorized disclosure.
We will assess each request and respond in accordance with applicable data protection requirements. The exercise of data protection rights is generally free of charge; however, applicable law may permit a reasonable fee or refusal to act in relation to requests that are manifestly unfounded or excessive.
Questions and Further Information
Data protection contact: GDPR-GSC@uniqa.at
Postal address: Palárikova 2852/3, 949 01 Nitra, Slovak Republic
Supervisory authority: Office for Personal Data Protection of the Slovak Republic
Galvaniho 7/B, 821 04 Bratislava, Slovak Republic
E-mail: statny.dozor@pdp.gov.sk
Website: https://dataprotection.gov.sk/en/
Website Privacy and Cookies
For more detailed information about the processing of personal data in connection with the use of this website, and about the use of cookies and similar technologies, please refer to the following documents:
- https://uniqagroupservices.com/privacy-policy Privacy Policy
- https://uniqagroupservices.com/cookie-policy Cookie Policy